https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-3610.htmlhttps://patchthecve.com/cve/CVE-2024-3610.htmlWed, 17 Jun 2026 07:44:37 +0000MEDIUM 5.3: The WP Child Theme Generator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wctg_easy_child_theme() function in all versions up to, and including, 1.1.1. This makes it possible for unauthenticated attackers to create a blank child thehttps://patchthecve.com/cve/CVE-2023-47873.htmlhttps://patchthecve.com/cve/CVE-2023-47873.htmlWed, 17 Jun 2026 06:33:27 +0000CRITICAL 9.1: Unrestricted Upload of File with Dangerous Type vulnerability in WEN Solutions WP Child Theme Generator.This issue affects WP Child Theme Generator: from n/a through 1.0.9.https://patchthecve.com/cve/CVE-2023-41847.htmlhttps://patchthecve.com/cve/CVE-2023-41847.htmlWed, 17 Jun 2026 06:22:55 +0000MEDIUM 6.5: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WEN Solutions Notice Bar plugin <= 3.1.0 versions.https://patchthecve.com/cve/CVE-2021-4389.htmlhttps://patchthecve.com/cve/CVE-2021-4389.htmlWed, 17 Jun 2026 04:19:39 +0000MEDIUM 4.3: The WP Travel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.4.6. This is due to missing or incorrect nonce validation on the save_meta_data() function. This makes it possible for unauthenticated attackers to save metadata for travel posts via a